Home / Security
Security and trustBuilt to pass your security review.
Your keys, your data, and your stack stay yours. Here is exactly how Creogen handles each, in plain terms, with the documents to back it.
Four commitments, in plain terms.
Your keys, never exposed
BYO keys are encrypted at rest, decrypted only in memory, and never appear in any client bundle or log.
Per-workspace isolation
No cross-tenant access. Your data and your logic stay yours, walled from everyone else.
EU residency, GDPR
Hosted in the EU, with a data processing addendum at kickoff and a right to delete.
You own everything
Your CMS, hosting, model key, and content. No lock-in, no black box, no hostage data.
What we provide, and what we do not over-claim.
Common questions.
Encrypted at rest, decrypted only in memory, and never written to any log or client bundle.
In the EU by default, with a data processing addendum signed at kickoff and a right to delete.
Not yet. It is on the roadmap, and we will say so plainly until it is true.
Access is scoped per workspace with tenant isolation. There is no cross-tenant access, and every key use is logged.
Yes. A data processing addendum is signed at kickoff, with EU hosting and a right to delete.
See what AI search reads on your site.
Drop a URL. We scan your AEO, brand, and migration gaps, score them, and show what they cost. One step, no deck.